The Reliable Event Logging Protocol library
relpTcpConnectTLSInit_ossl() called SSL_new() before applying
tls.tlscfgcmd via relpTcpSetSslConfCmd_ossl(), so the SSL object
inherited the default group list from SSL_CTX instead of the
administrator-configured one. Move sslState = osslClient and
relpTcpSetSslConfCmd_ossl() to before SSL_new() so the SSL object
snapshots the correctly configured SSL_CTX.
Backport:
|
||
|---|---|---|
| .fmf | ||
| .gitignore | ||
| ci_tests.fmf | ||
| fix-openssl-fd-double-close.patch | ||
| gating.yaml | ||
| librelp-1.10.0-crypto-compliance.patch | ||
| librelp-1.10.0-rhbz1972067-relpEngineSetTLSLibByName.patch | ||
| librelp.spec | ||
| RHEL-192631-fix-ossl-ssl-new-ordering.patch | ||
| sources | ||